Job Summary :

We are looking for an experienced AWS Senior Network Security Engineer to design, implement, and secure an isolated recovery environment (IRE).

The role involves establishing network segmentation, configuring AWS networking components and FortiGate firewalls, implementing cloud security controls, and ensuring complete isolation of recovery traffic from production and enterprise services.

The engineer will also be responsible for integrating security telemetry with the SIEM platform and validating endpoint protection and cloud security posture across recovered workloads.

Key Responsibilities :

- Design and implement network isolation to ensure recovery traffic remains fully segregated from production and enterprise services.

- Configure AWS Transit Gateway (TGW) attachments, route table associations, VPC routing, and Route 53 public and private hosted zones.

- Configure and manage FortiGate firewalls, perimeter ACLs, and remote-access solutions, including break-glass access paths.

- Implement and validate security groups, Network ACLs (NACLs), egress restrictions, and network segmentation controls to maintain the air-gap security posture.

- Integrate security logs and telemetry from infrastructure, platform, and application sources with the SIEM platform.

- Validate deployment and active operation of endpoint and workload protection across recovered servers, containers, and cloud workloads.

- Ensure vulnerability management and Cloud Security Posture Management (CSPM) tools have visibility into the isolated recovery environment.

- Collaborate with security stakeholders on policy definition, security controls reviews, and compliance requirements for regulated workloads.

Mandatory Skills :

- 8+ years of experience in AWS networking and cloud security engineering.

- Strong hands-on expertise in AWS Transit Gateway, VPC routing, and Route 53 public/private hosted zones.

- Experience configuring and managing FortiGate firewalls and perimeter access controls.

- Strong understanding of network isolation, segmentation, and secure network architecture for regulated environments.

- Hands-on experience implementing security groups, NACLs, egress restrictions, and cloud security guardrails.

- Experience integrating cloud infrastructure and application logs with SIEM platforms.

- Knowledge of EDR, CSPM, vulnerability management, and workload protection solutions.

- Experience designing and validating secure remote-access mechanisms and emergency access procedures.

Preferred Experience :

- Experience designing isolated recovery environments or disaster recovery network architectures.

- Familiarity with maintaining air-gap security controls during and after recovery operations.

- Experience working in regulated enterprise environments with stringent security and compliance requirements.

- Ability to collaborate with security teams on policy definition and security control reviews.

Key Deliverables :

- Secure network isolation setup for the isolated recovery environment.

- Configured and validated AWS networking, routing, firewall, and perimeter controls.

- Implemented security guardrails and controlled remote-access mechanisms.

- Verified SIEM integration, endpoint protection, vulnerability management, and CSPM visibility across recovered workloads.